reconnaissancepractice ofcovertlydiscovering andcollectinginformationabout a systemthreatanything thathas thepotential tocause the lossof an assetPrincipleof LeastPrivilegeusers andprograms shouldonly have thenecessary accessto complete theirtasks penetrationtestingattempt toevaluate thesecurity of an ITinfrastructure bysafely trying toexploitvulnerabilitieshactivistmisuse a computersystem or networkfor socially orpolitically motivatedreasonsIoTnetwork ofphysical objectsembedded withsensors andsoftwareconnected to theInternetassetsomethingthat hasvalue to theperson ororganizationintegrityensures thatdata is notmodified ortamperedwithconfidentialityensures thatdata is notdisclosed tounintendedpersonsexploita procedure orproduct that takesadvantage of avulnerability tocarry out a threatcybercriminalusually seek toexploit securityvulnerabilities forsome kind offinancial reward orrevengevulnerabilitya weakness that allowsa threat to be carriedout, such as a USBport that is enabled onthe server hosting thedatabase or a serverroom door that isfrequently left ajarnation-stateextremelysophisticatedhacker that issponsored by oraffiliated with agovernmentalorganizationIPAddressa series ofnumbers thatidentifies anydevice on anetworkthreatagentperson orentity thatattempts orcarries out athreatLinuxopen source andcommunity-developed operatingsystem forcomputers, servers,mainframes, mobiledevices andembedded devicesavailabilityensures theuptime of thesystem so thatdata isaccessiblewhen neededzerodayattack targeting asoftwarevulnerability whichis unknown to thesoftware vendor orto antivirus vendorsenumerationprocess ofextracting usernames, machinenames, networkresources, sharesand services from asystemthink likeanadversarystrategy thatallows you toanticipate attackstrategies anddefend yoursystemsaccordinglynon-repudiationprovidesvalidation ofa message'soriginscriptkiddieunsophisticatedthreat actorsthat find andrun attacks theyfind online MACAddressa hardwareidentificationnumber thatuniquely identifieseach device on anetworkdefenseindeptha security approachthat combinesmultiple securitycontrols anddefenses to create acumulative effectreconnaissancepractice ofcovertlydiscovering andcollectinginformationabout a systemthreatanything thathas thepotential tocause the lossof an assetPrincipleof LeastPrivilegeusers andprograms shouldonly have thenecessary accessto complete theirtaskspenetrationtestingattempt toevaluate thesecurity of an ITinfrastructure bysafely trying toexploitvulnerabilitieshactivistmisuse a computersystem or networkfor socially orpolitically motivatedreasonsIoTnetwork ofphysical objectsembedded withsensors andsoftwareconnected to theInternetassetsomethingthat hasvalue to theperson ororganizationintegrityensures thatdata is notmodified ortamperedwithconfidentialityensures thatdata is notdisclosed tounintendedpersonsexploita procedure orproduct that takesadvantage of avulnerability tocarry out a threatcybercriminalusually seek toexploit securityvulnerabilities forsome kind offinancial reward orrevengevulnerabilitya weakness that allowsa threat to be carriedout, such as a USBport that is enabled onthe server hosting thedatabase or a serverroom door that isfrequently left ajarnation-stateextremelysophisticatedhacker that issponsored by oraffiliated with agovernmentalorganizationIPAddressa series ofnumbers thatidentifies anydevice on anetworkthreatagentperson orentity thatattempts orcarries out athreatLinuxopen source andcommunity-developed operatingsystem forcomputers, servers,mainframes, mobiledevices andembedded devicesavailabilityensures theuptime of thesystem so thatdata isaccessiblewhen neededzerodayattack targeting asoftwarevulnerability whichis unknown to thesoftware vendor orto antivirus vendorsenumerationprocess ofextracting usernames, machinenames, networkresources, sharesand services from asystemthink likeanadversarystrategy thatallows you toanticipate attackstrategies anddefend yoursystemsaccordinglynon-repudiationprovidesvalidation ofa message'soriginscriptkiddieunsophisticatedthreat actorsthat find andrun attacks theyfind online MACAddressa hardwareidentificationnumber thatuniquely identifieseach device on anetworkdefenseindeptha security approachthat combinesmultiple securitycontrols anddefenses to create acumulative effect

Cybersecurity Overview - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. practice of covertly discovering and collecting information about a system
    reconnaissance
  2. anything that has the potential to cause the loss of an asset
    threat
  3. users and programs should only have the necessary access to complete their tasks
    Principle of Least Privilege
  4. attempt to evaluate the security of an IT infrastructure by safely trying to exploit vulnerabilities
    penetration testing
  5. misuse a computer system or network for socially or politically motivated reasons
    hactivist
  6. network of physical objects embedded with sensors and software connected to the Internet
    IoT
  7. something that has value to the person or organization
    asset
  8. ensures that data is not modified or tampered with
    integrity
  9. ensures that data is not disclosed to unintended persons
    confidentiality
  10. a procedure or product that takes advantage of a vulnerability to carry out a threat
    exploit
  11. usually seek to exploit security vulnerabilities for some kind of financial reward or revenge
    cyber criminal
  12. a weakness that allows a threat to be carried out, such as a USB port that is enabled on the server hosting the database or a server room door that is frequently left ajar
    vulnerability
  13. extremely sophisticated hacker that is sponsored by or affiliated with a governmental organization
    nation-state
  14. a series of numbers that identifies any device on a network
    IP Address
  15. person or entity that attempts or carries out a threat
    threat agent
  16. open source and community-developed operating system for computers, servers, mainframes, mobile devices and embedded devices
    Linux
  17. ensures the uptime of the system so that data is accessible when needed
    availability
  18. attack targeting a software vulnerability which is unknown to the software vendor or to antivirus vendors
    zero day
  19. process of extracting user names, machine names, network resources, shares and services from a system
    enumeration
  20. strategy that allows you to anticipate attack strategies and defend your systems accordingly
    think like an adversary
  21. provides validation of a message's origin
    non-repudiation
  22. unsophisticated threat actors that find and run attacks they find online
    script kiddie
  23. a hardware identification number that uniquely identifies each device on a network
    MAC Address
  24. a security approach that combines multiple security controls and defenses to create a cumulative effect
    defense in depth